| Age | Commit message (Collapse) | Author |
|---|
|
f0 cron now does 'touch ... && date +%s > /data/nfs/nfs.LIVE_CHECK' so the
file content (epoch) plus its mtime both cross to f1's read-only sink via
zrepl. Documented the cron % escaping gotcha and the f1 freshness check
(seconds between f1's clock and the epoch in the file). Stalled if lag
exceeds ~10-11 min.
|
|
f0 root crontab touches /data/nfs/nfs.LIVE_CHECK every 10 min, gated on
/data/nfs/nfs.DO_NOT_REMOVE. zrepl replicates zdata/enc/nfsdata to f1's
read-only sink every minute, so the file's mtime on f1 reveals replication
freshness (stalled if >~10-11 min behind). Added to zrepl.md and the hub
SKILL.md reference bullet.
|
|
The only live S3 offsite backup is the zusb quarterly workflow, which
backs up zusb/data/* (not the f-host zdata pool). Verified no aws/s3/
backup cron in root crontab on any f-host and no pre-existing /root/.aws.
zdata redundancy is via zrepl replication, not S3. Also corrected the
aws-credentials caveat (symlink is deliberately dangling on non-zusb
hosts until zusb is replugged there) and noted the 2026-07-20 install
across all f-hosts.
|
|
How to install awscli on a FreeBSD host (py39 on 14.x, py312 on 15.x)
and wire /root/.aws with a credentials symlink to
/opt/snonux/secrets/aws.credentials, which rides on the zusb pool.
Covers both the zdata daily-cron S3 backup and the zusb quarterly
backup. Cross-linked from the zusb note in usb-keys.md.
|
|
zusb is a 4-disk raidz2 USB-SATA pool used as offline backup storage,
loaded ~once per quarter. Migrated from t450 to the f3s USB-key scheme:
zusb/data/enc rekeyed to a raw key on /keys/zusb.key, scripts on all
f-hosts. Note added to usb-keys.md and the hub SKILL.md.
|
|
Execute plans/f3s-skill-split-plan.md. Carve the oversized f3s skill into six
f3s-prefixed siblings so each loads on its own triggers, and slim f3s to a hub
(38 reference files -> 10; 119 -> 73 lines):
- f3s-storage ZFS/zrepl/CARP/NFS-stunnel, nfs-mount-monitor, backups
- f3s-k3s cluster install, off-LAN access, ingress, etcd, r-node Rex
- f3s-observability Prometheus/Alloy/Loki/Tempo, FreeBSD node_exporter
- f3s-workloads Immich, Garage, Player, yChat, goprecords/uptimed
- f3s-raspberry-pi pi0/pi1 NetBSD static site, pi2/pi3 Pi-hole/LAN DNS
- f3s-dtail dserver deployment/ops (SSH 2222)
f3s hub keeps the master Host-IP table, physical hosts, bhyve, WireGuard mesh,
and off-LAN access as the canonical inward-pointing context, plus a Related
skills block. Applies skill-maintenance best practices: fixes the three inlined
SKILL.md duplications (Pi/webserver, DTail) by moving prose to one canonical home
and keeping each new SKILL.md a slim index that points to its references rather
than re-inlining them. All cross-skill links rewritten to ../../<skill>/references/
form (incl. inbound links from pkgrepo and rocky-vm-setup, and two pre-existing
broken links); verified all 112 relative links resolve.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
